2026-06-02_842538b407f3231e0b34e9ef34d34516_akira_cobalt-strike_glassworm_rusty-stealer_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-02_842538b407f3231e0b34e9ef34d34516_akira_cobalt-strike_glassworm_rusty-stealer_satacom
Size 257KB
Sample260602-sdn7qagt4y
SHA256 4d70e14ab00e52ae0aaeac88431214b3360ae7a253693e7d89b441eb0ef3e82f
MD5 842538b407f3231e0b34e9ef34d34516
SHA1 5195396361dfaabc145766255cf4707d487db558
SHA512 12c9bc1619f79c16fc8859b5bffaa11d8184124f20aed006ca33d6635801e7286e3e9f5560c4e42196ab2515d555e3f0b7175c2949b2fe2c0a75c071b595ee06
SSDEEP 3072:Ee5yT78GZtxRap7QjWkRZlIf6QpY0/GBXETJ9Uz+kwDXHtU+3IGq6HYk:zQ8yraqZlIBJ/G89go9UEIYH
TLSH
T115444B07F9849CA8D45BC078830A8667A937BC850B22E5FB03A575216F7BAF42F7D705
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-02_842538b407f3231e0b34e9ef34d34516_akira_cobalt-strike_glassworm_rusty-stealer_satacom

File Explorer

2026-06-02_842538b407f3231e0b34e9ef34d34516_akira_cobalt-strike_glassworm_rusty-stealer_satacom

.exe 257KB

2026-06-02_842538b407f3231e0b34e9ef34d34516_akira_cobalt-strike_glassworm_rusty-stealer_satacom

IMPHASH 984826bf1685c59f4243bb70e4ad5c5d
SHA256 4d70e14ab00e52ae0aaeac88431214b3360ae7a253693e7d89b441eb0ef3e82f
MD5 842538b407f3231e0b34e9ef34d34516
SHA1 5195396361dfaabc145766255cf4707d487db558
SHA512 12c9bc1619f79c16fc8859b5bffaa11d8184124f20aed006ca33d6635801e7286e3e9f5560c4e42196ab2515d555e3f0b7175c2949b2fe2c0a75c071b595ee06
SSDEEP 3072:Ee5yT78GZtxRap7QjWkRZlIf6QpY0/GBXETJ9Uz+kwDXHtU+3IGq6HYk:zQ8yraqZlIBJ/G89go9UEIYH
TLSH
T115444B07F9849CA8D45BC078830A8667A937BC850B22E5FB03A575216F7BAF42F7D705
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

181808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

svchost_update.pdb

bcryptprimitives

ProcessPrng

kernel32

SetFileInformationByHandle CloseHandle GetFileInformationByHandleEx FindClose GetFullPathNameW SetFileTime FindFirstFileExW SetLastError GetTempPathW CopyFileExW FindNextFileW GetLastError GetTimeZoneInformationForYear GetFileInformationByHandle FormatMessageW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter QueryPerformanceFrequency CreateDirectoryW CreateFileW GetModuleHandleA GetModuleHandleW GetEnvironmentVariableW HeapAlloc WriteConsoleW MultiByteToWideChar WaitForSingleObject GetConsoleOutputCP GetConsoleMode GetStdHandle GetCurrentDirectoryW RtlVirtualUnwind WideCharToMultiByte ReleaseMutex GetModuleFileNameW GetSystemTimePreciseAsFileTime SwitchToThread AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetCurrentThreadId RtlCaptureContext GetCurrentProcess RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW GetCurrentProcessId CreateMutexA

ntdll

NtWriteFile NtOpenFile RtlNtStatusToDosError NtReadFile

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

vcruntime140

memcpy memcmp __CxxFrameHandler3 memset __C_specific_handler memmove __current_exception_context __current_exception

api-ms-win-crt-runtime-l1-1-0

__p___argc _cexit _register_thread_local_exe_atexit_callback _initialize_onexit_table _register_onexit_function _crt_atexit terminate __p___argv _seh_filter_exe _set_app_type _c_exit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode free

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-02_842538b407f3231e0b34e9ef34d34516_akira_cobalt-strike_glassworm_rusty-stealer_satacom

bcryptprimitives

kernel32

ntdll

api-ms-win-core-synch-l1-2-0

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic